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nally stored therein based upon the received update In- 
formation. 

[0032] According to this construction, the analyzing 
condition can be changed by an Instruction from the con- 
tent management center that manages content. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0033] These and other objects, advantages and fea- 
tures of the Invention will become apparent from the fol- 
lowing description thereof taken in conjunction with the 
accompanying drawings that illustrate a specific embod- 
iment of the invention. In the drawings: 
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FIG. 18 is a flowchart showing the operation of the 
content-log analyzing system 2. 

DESCRIPTION OF THE PREFERRED 

5 EMBODIMENTS 

[First Embodiment] 

[0034] The following describes a content-log analyz- 
10 ing system 1 as a first embodiment of the present Inven- 
tion, with reference to the drawings. 

<Constructlon> 

[0035] FIG. 1 shows the construction of the content- 
log analyzing system 1 . As shown in the figure, the con- 
tent-log analyzing system 1 is composed of a broadcast 
receiving device 1 0, a TV (television) 20, a PC (personal 

computer) 30, a data-communication controlling device 
40, a content-log analyzing server 50, and a broadcast 
device 60. 

[0036] In FIG. 1, the broadcast receiving device 10, 
the TV 20, the PC 30, and the data-communication con- 
trolling device 40 encircled by a broken line are devices 
placed in a home of the user who views and/or listens 
to content. The broadcast receiving device 10, the TV 
20, and the PC 30 are each connected to the data-com- 
munication controlling device 40 via a LAN cable, and 
communicate with the data-communication controlling 
device 40. The content-log analyzing server 50 and the 
broadcast device 60 are placed In a donvent provision 
center that provides content. The content-log analyzing 
server 50 is connected to the data-communication con- 
trolling device 40 via an Internet 70. The broadcast de- 
vice 60 broadcasts content via a broadcast satellite 80. 
[0037] The following describes each component of 
the system 1 in detail. 

1 . Broadcast Receiving Device 1 0 

[0038] The broadcast receiving device 10 receives 
and stores encrypted content that Is broadcasted from 
the broadcast device 60 via the broadcast satellite 80. 
Within the home network, the broadcast receiving de- 
vice 1 0 is connected to the data-communication control- 
ling device 40 via a LAN cable. The broadcast receiving 
device 10 receives a request for playing back content 
(hereafter, a "content request") from the TV 20 or the 
PC 30 via the data-communication controlling device 
40, and transmits the requested content that Is in an en- 
crypted form, to the data-communication controlling de- 
vice 40. 

[0039] FIG. 2 is a block diagram showing the con- 
struction of the broadcast receiving device 1 0. As shown 
in the figure, the broadcast receiving device 1 0 is com- 
posed of a receiving unit 101 , a processing unit 102, a 
content storing unit 103, a controlling unit 104, a com- 
rnunicating unit 105, and a memory unit 106. 



FIG. 1 shows the construction of a content-log an- is 
alyzing system 1 ; 

FIG. 2 is a block diagram showing the construction 
of a broadcast receiving device 1 0; 
FIG. 3 shows the data structure of encrypted con- 
tent; 20 
FIG. 4 Is a block diagram showing the construction 
of a TV 20; 

FIG. 5 is a block diagram showing the construction 
of a PC 30; 

FIG. 6 Is a block diagram showing the construction 25 
of a data-communication controlling device 40; 
FIG. 7A shows key Information stored in a decrypt- 
ing unit 404 of the data-communication controlling 
device 40; 

FIG. 7B shows key information stored in an encrypt- 30 
Ing unit 405 of the data^communication controlling 
device 40; 

FIG. 8 shows the data structure of an address con- 
version table stored in the data-communication 
controlling device 40; 35 
FIG. 9 shows the data structure of a content-log ta- 
ble stored in the data-communication controlling 
device 40; 

FIG. 10 is a block diagram showing the construction 
of a content-log analyzing server 50; 40 
FIG. 11 is a flowchart showing the operation of the 
content-log analyzing system 1 , to be continued to 

FIG. 12; 

FIG. 12 is a flowchart showing the operation of the 
content-log analyzing system 1 , to be continued to 
FIG. 13; 

FIG. 13 is a flowchart showing the operation of the 
content-log analyzing system 1 ; 
FIG. 1 4 shows the construction of a content-log an- 
alyzing system 2; so 
FIG. 1 5 is a block diagram showing the construction 
of a data-communication controlling device 40a; 
FIG. 16 is a flowchart showing the operation of the 
content-log analyzing system 2, to be continued to 
FIG. 17; 55 
FIG. 1 7 is a flowchart showing the operation of the 
content-log analyzing system 2, to be continued to 
FIG. 18; and 
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(1) Receiving Unit 101 



[0040] The receiving unit 101 includes an antenna, 
and receives, via the antenna, a digital broadcast wave 
that is broadcasted from the broadcast device 60 via the s 
broadcast satellite 80. The receiving unit 101 extracts, 
from the received digital broadcast wave, packets that 
constitute encrypted content, and outputs the extracted 
packets one after another to the processing unit 1 02. 

10 

(2) Processing Unit 1 02 

[0041] The processing unit 1 02 receives packets one 
after another from the receiving unit 101, and recon- 
structs encrypted content using the received packets, is 
and stores the encrypted content into the content storina 
unit 103. ^ 

(3) Content Storing Unit 1 03 

20 

[0042] The content storing unit 103 is specifically a 
hard disk unit, and stores encrypted content that is out- 
putted from the processing unit 1 02. 
[0043] The encrypted content 1 50 shown In FIG . 3 Is 
one example of encrypted content stored in the content 25 
storing unit 103. 

[0044] As shown in the figure, the encrypted content 
1 50 is composed of header infonnation. encrypted con- 
tent infomnation, and end code. The header information 
Includes "content ID" 151. "license information" 152 30 
"additional information" 154. "data size of header Infor- 
mation", and the like. 

[0045] The "content ID" Is an ID used to uniquely Iden- 
tify content. The "content ID" 151 of the encrypted con- 
tent 150 is "Program. 01 ". 35 
[0046] The "license infonnation" is information de- 
scribing a content type and copy control information of 
content. To be specific, the content type is "High-Value" 
or "Free", and the copy control information is "Copy 
Free". "Copy Once", "Copy No More", or "Copy Never''. 40 
In the case of the "license infonnation" 152 of the en- 
crypted content 150, the content type Is "High- Value" 
and the copy control infonnation is "Copy Never". 
[0047] The "additional infomnation" is used to judge 
whether or not to record the communication In the "log" 45 
for content's communication (hereafter, the "content- 
log") when the content is distributed to a certain device 
within the home network via a LAN cable. The "addition- 
al Infomnation" is a flag set at "0" or "1 " . The additional 
infomiation being "1 " indicates to record the communi- so 
cation in the content-log, whereas the additional infor- 
mation being "2" Indicates not to record the communi- 
cation in the content-log. The "additional Information" 
154 of the encrypted content 150 Is "1". The additional 
Infomriation is described in more detail later. 55 
[0048] The "data size of header infomiatlon" is a data 
length of the header information expressed in units of 
bytes. It should be noted here that the "data size of 



header infomiation" is not shown in FIG. 3. 
[0049] The encrypted content Information is specifi- 
cally main data of the content that has been encrypted 
by the broadcast device 60 using a content key "KC" as 
an encryption key, according to the encryption algorithm 
"E1 "To be specific, the DES (Data Encryption Standard) 
is employed as the encryption algorithm "El" 
[0050] The end code is a predetennined bit sequence 
representing the end of the content. 

(4) Controlling Unit 104 

[0051] The controlling unit 104 includes a CPU, a 
ROM, a RAM, and the like. The controlling unit 104 con- 
trols the entire broadcast receiving device 1 0 by its C PU 
executing a computer program stored in its ROM. 
[0052] The controlling unit 1 04 receives a content re- 
quest from the data-communication controlling device 
40 via the communicating unit 105. The controlling unit 
' 1 04 reads a content ID included in the received request, 
and reads encrypted content having the same content 
ID, from the content storing unit 1 03. The controlling unit 
104 outputs the read encrypted content to the commu- 
nicating unit 105. 

(5) Communicating Unit 105 

[0053] The communicating unit 1 05 Is a LAN-connect- 
ed unit including an IEEE1394 connector and the like, 
and is connected to the data-communication controlling 
device 40 via a LAN cable. The communicating unit 1 05 
receives the encrypted content from the controlling unit 
104, divides the encrypted content into packets, and 
transmits the packets one after anotherto the data-com- 
munication controlling device 40. 

(6) Memory Unit 106 

[0054] The memory unit 1 06 is connected to the com- 
municating unit 105. In the memory unit 106, a network 
address "IPC", a device ID "IDC", and a certificate "Cl- 
DC" are stored. The network address "IPC" Is an IP ad- 
dress that Is transmitted from the data-communication 
controlling device 40 when the broadcast receiving de- 
vice 10 is newly connected to the data-communication 
controlling device 40. The device ID "IDC" is specifically 
a MAC address assigned to a NIC (Network Interface 
Card) at the time of manufacture. The certificate "CIDC" 
has been issued by a certification authority and is used 
to authenticate the device ID "IDC". 
[0055] It should be noted here thatthe device ID "IDC" 
and the certificate "CIDC" are stored at an OS level or 
a BIOS level to prevent them from being tampered by 
the user. 

2. TV 20 

[0056] TheTV20 Is a device for decoding, andplaying 



6 



BNSDOCID: <ep 1 37231 8A2J_> 



1 



11 

back content, i.e., displaying content. The TV 20 is spe- 
cifically a connputer system that is composed of a micro- 
processor, a ROM, a RAM, a LAN-connected unit, and 
the like. 

[0057] FIG. 4 Is a block diagram showing the con- 5 
struction of the TV 20. As shown in the figure, the TV 20 
Is composed of a communicating unit 201 , a memory 
unit 202, an input unit 203, a controlling unit 204, a de- 
crypting unit 205, an audio decoder 206, a video decod- 
er 207, a speaker 208, and a monitor 209. io 

(1) Communicating Unit 201 

[0058] The communicating unit 201 Is a LAN-connect- 
ed unit including an IEEE1394 connector and the like, is 
Via a LAN cable, the communicating unit 201 is connect- 
ed to the data-communication controlling device 40. 
[0059] The communicating unit 201 receives a con- 
tent request, and a network address "IPA" outputted 
from the controlling unit 204, and transmits the received 20 
content request and network address "IPA" to the data- 
communication controlling device 40. 
[0060] Also, the communicating unit 201 receives 
packets of encrypted content from the data-communi- 
cation controlling device 40, and outputs the packets of 25 
encrypted content to the encrypting unit 205. 

(2) Memory Unit 202 

[0061] The memory unit 202 is connected to the com- 30 
municating unit 201 . In the memory unit 202, a network 
address "IPA". a device ID "IDA", and a certificate "Cl- 
DA"-are stored. The network address "IPA" is an IP ad- 
dress transmitted from the data-communication control- 
ling device 40 when the TV 20 is newly connected to the 35 
data-communfcation controlling device 40. The device 
ID "IDA" is specifically a MAC address assigned to a 
NIC at the time of manufacture. The certificate "CIDA" 
has been issued by a certification authority and is used 
to authenticate the device ID "IDA". 40 
[0062] It should be noted here thatthe device ID "IDA" 
and the certificate "CIDA" are stored at an OS level or 
a BIOS level to prevent them from being tampered by 
the user. 

45 

(3) Input Unit 203 

[0063] The input unit 203 is specifically a user inter- 
face Including a button and the like. Upon receipt of a 
user operation of the button and the like, the input unit so 
203 generates an input signal corresponding to the op- 
eration, and outputs the generated input signal to the 
controlling unit 204. 

[0064] When the user operation indicates a request 
for playing back content, the input unit 203 generates, ss 
as the input signal, a content request including a content 
ID, and outputs the generated content request to the 
controlling unit 204. 
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(4) Controlling Unit 204 

[0065] The controlling unit 204 includes a CPU, a 
ROM, a RAM: and the like. The controlling unit 204 con- 
trols the entire TV 20 by its CPU executing a computer 

program stored in its ROM. 

[0066] The controlling unit 204 receives an input sig- 
nal from the input unit 203, and executes processing 
suitable for the received input signal. Upon receipt of a 
content request including a content ID as an input signal 
from the input unit 203, the controlling unit 204 reads 
the network address "IPA" stored in the memory unit 
202, and transmits the read network address "IPA" and 
the content request, to the data-communication control- 
ling device 40 via the communicating unit 201 . 

(5) Decrypting Unit 205 

[0067] The decrypting unit 205 includes a CPU, a 
ROM, a RAM, and the like, and intemally stores a device 
key "KA". 

[0068] The decrypting unit 205 receives encrypted 
content from the communicating unit 201 , and decrypts 
the encrypted content in the following way, so as to gen- 
erate content. 

[0069] The decrypting unit 205 first refers to the "data 
size of header Information" included In header infonna- 
tion of the encrypted content, to detect a start position 
of the encrypted content information. The decrypting 
unit 205 then starts decrypting, from the detected start 
position, the encrypted content infomiation using the de- 
vice key "KA" according to the decryption algorithm 
"D2", so as to generate content information. The de- 
crypting unit 205 continues the decryption process of the 
encrypted content information until detecting the end 
code. It should be noted here that an algorithm designed 
to decrypt data that has been encrypted according to 
the encryption algorithm "E2" is employed as the de- 
cryption algorithm "D2". 

[0070] The decrypting unit 205 demultiplexes the con- 
tent infomiation Into an audio stream and a video 
stream, and outputs the audio stream to the audio de- 
coder 206 and the video stream to the video decoder 
207. 

(6) Audio Decoder 206 

[0071] The audio decoder 206 receives an audio 
stream from the decrypting unit 205, expands the re- 
ceived audio stream to an audio signal, and outputs the 
audio signal to the speaker 208. 

(7) Video Decoder 207 

[0072] The video decoder 207 receives a video 
stream from the decrypting unit 205, expands the re- 
ceived video stream to a video signal, and outputs the 
video signal to the monitor 209. 
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3. PC 30 

[0073] The PC 30 is a personal computer system that 
Is composed of a microprocessor, a ROM. a RAM, a 
hard disk unit, a display unit, a keyboard, a mouse, a 
LAN-connected unit, and the like. 
[0074] FIG. 5 is a block diagram showing the con- 
struction of the PC 30. As shown in the figure, the PC 
30 is composed of a communicating unit 301 , a memory 
unit 302, an input unit 303, a controlling unit 304, an au- 
dio decoder 305, a video decoder 306, a speaker 307, 
and a monitor 308. 

(1) Communicating Unit 301 

[0075] The communicating unit 301 is a LAN-connect- 
ed unit Including an IEEE1394 connector and the like, 
and is connected to the data-communication controlling 
device 40 via a LAN cable. 

[0076] The communicating unit 301 receives a con- 
tent request and a network address "IPB" from the con- 
trolling unit 304, and transmits the received content re- 
quest and network address to the data-communication 
controlling device 40. 

[0077] Also, the communicating unit 301 receives 
packets of encrypted content from the data-communi- 
cation controlling device 40, and outputs the packets of 
encrypted content to the controlling unit 304. 

(2) Memory Unit 302 

[0078] The memory unit 302 Is connected to the com- 
municating unit 301 . In the memory unit 302, a network 
address "IPB", a device ID "IDB", and a certificate "Cl- 
DB" are stored. The network address "IDS" Is an IP ad- 
dress transmitted from the data-communication control- 
ling device 40 when the PC 20 is newly connected to 
the data-communication controlling device 40 as de- 
scribed above. The device ID "IDB" is specifically a MAC 
address assigned to a NIC at the time of manufacture. 
The certificate "CIDB" has been issued by a certification 
authority and is used to authenticate the device ID "IDB". 
[0079] It should be noted here that the device ID "IDB" 
and the certificate "CIDB" are stored at an OS level or 
a BIOS level to prevent them from being tampered by 
the user. 

(3) input Unit 303 

[0080] The input unit 303 is specifically a user inter- 
face including a keyboard, a mouse, and the like. Upon 
receipt of a user operation of the keyboard, mouse, or 
the like, the input unit 303 generates an input signal cor- 
responding to the operation, and outputs the generated 
input signal to the controlling unit 304. 
[0081] When the user operation Indicates a request 
for playing back content, the Input unit 303 generates, 
as the input signal, a content request Including a content 
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ID, and outputs the generated content request to the 
controlling unit 304. 

(4) Controlling Unit 304 

[0082] The controlling unit 304 includes a CPU, a 
ROM, a RAM, an HDD, and the like. The controlling unit 
304 controls the entire PC 30 by its CPU executing a 
computer program stored in its ROM or HDD. 
[0083] The controlling unit 304 receives an input sig- 
nal from the input unit 303, and executes processing 
suitable for the received input signal. Upon receipt of a 
content request Including a content ID as an input signal 
from the input unit 303, the controlling unit 304 reads 
the network address "IPB" stored in the memory unit 
302, and transmits the read network address "IPB" and 
the content request, to the data-communication control- 
ling device 40 via the communicating unit 301 . 
[0084] Also, the controlling unit 304 internally stores 
a device key "KB". The device key "KB" is a decryption 
key to be used to decrypt encrypted content when the 
PC 30 receives the encrypted content from the data- 
communication controlling device 40. 
[0085] Upon receipt of encrypted content including 
encrypted content Information encrypted using the de- 
vice key "KB" from the data-communication controlling 
device 40, the controlling unit 304 decrypts the encrypt- 
ed content In the following way, so as to generate con- 
tent. 

[0086] The controlling unit 304 first refers to the "data 
size of header Information" included In header Infonna- 
tlon of the encrypted content, to detect a start position 
of the encrypted content information. The controlling 
unit 304 then starts decrypting, from the detected start 
position, the encrypted content Infonnation using the de- 
vice key "KB" as a decryption key, according to the de- 
cryption algorithm "D2", so as to generate content infor- 
mation. The controlling unit 304 continues the decryp- 
tion process of the encrypted content information until 
detecting the end code. The controlling unit 304 demul- 
tiplexes the content infonnation, into an audio stream 
and a video stream, and outputs the audio stream to the 
audio decoder 305 and the video stream to the video 
decoder 306. 

(5) Audio Decoder 305 

[0087] The audio decoder 305 receives an audio 
stream from the controlling unit 304, expands the re- 
ceived audio stream to an audio signal, and outputs the 
audio signal to the speaker 307. 



(6) Video Decoder 306 

55 [0088] The video decoder 306 receives a video 
stream from the controlling unit 304, expands the re- 
ceived video stream to a video signal, and outputs the 
video signal to the monitor 308. 
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